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SYSTEM AND METHOD FOR ESTABLISHING AND MANAGING RELATIONSHIPS 
BETWEEN PSEUDONYMOUS IDENTIFICATIONS AND MEMBERSHIPS IN 

ORGANIZATIONS 

[0001] This application is a continuation-in-part of U.S. application Ser. No. 

09/795,968 filed March 1, 2001 (the "parent application"), which is itself a 
continuation-in-part of U.S. Ser. No. 09/686,516 filed October 11, 2000 (the 
"grandparent application"), which are both incorporated herein by reference in their 
entirety. 

BACKGROUND 

Field of the Invention 

[0002] The present invention relates generally to electronic communities where 

individuals interact and exchange communications over local and world-wide 
networks. More particularly, the present invention relates to electronic identities and 
reputations established within such electronic communities. 
Background of the Invention 

[0003] Electronic communities have been used in the art to facilitate communications 

between two or more people. Electronic communities typically allow for exchange of 
information, ideas and opinions over an extended period of time, i.e., a discussion 
about a particular topic may be initiated by an individual posting a message on day 
one, and subsequent discussion participants may receive, view or respond to the 
message at a later date. Electronic communities are similar to non-electronic 
communities in that members of each electronic community can establish a reputation 
based on their participation within the community. 

[0004] An electronic community generally provides one or more discussion forums 

and individual forums may be dedicated to particular topics. An electronic discussion 
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forum may allow even participants new to the forum to review past discussion 
messages and therefore to fully participate in the forum. Well-known examples of 
such communities and electronic forums include Web-based and proprietary message 
boards (both public and private), USENET news groups, and electronic mailing lists. 
These electronic communities and discussion forums support both synchronous and 
asynchronous discussions, i.e., one or more participants may inject communications 
into the discussion at the same time, or nearly the same time, without disrupting the 
flow of communications. This allows each individual electronic discussion forum to 
be rich with communications spanning a wide variety of topics and subjects. 
[0005] Other communities and electronic discussion forums may facilitate more 

traditional asynchronous-like communications by providing, e.g., interactive chat 
sessions. In these electronic communities and discussion forums, participants are 
typically online at the same time and are actively responding to messages posted by 
others. These discussion forums are similar to a traditional telephone discussion in 
that the information in exchanged in real-time. However, a significant difference is 
that the electronic discussion forums are, by their nature, written or recorded message 
transmissions, which may be saved for historical records or for analysis at a future 
date. 

[0006] Although most electronic communities require each user to select an identity 

that is unique within a particular community, there are not currently any practical 
means for the user to correlate his or her electronic identity in one community or 
forum with his or her electronic identities in other communities or forums. This 
problem is addressed in the co-pending parent and grandparent applications and the 
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co-pending application for a "System And Method For Establishing And Evaluating 
Cross-Community Identities In Electronic Forums/' filed June 13, 2001 . which is also 
incorporated herein by reference in its entirety. Another problem with the state of the 
art stems from one of the well-known benefits of electronic communities: the ability 
for users to maintain separation between their physical identity and their on-line 
identity or identities. Such anonymity is a cherished attribute of the modern electronic 
world and allows users the freedom to participate in a wide variety of discussion 
forums without being subjected to harassment or other unwelcome attention in realms 
outside of their participation in electronic communities and forums. A problem 
however arises when an individual wishes to "speak" in an electronic community or 
forum as a bona fide member of some organization without revealing his or her actual 
identity. 

[0007] In the current state of the art, a user participating in an electronic community 

or forum may claim membership in a particular organization or group of 
organizations. However, the user cannot currently "prove" such membership without 
either revealing his or her true identity in the electronic mediums. Moreover, if the 
user claims some special authority to speak on behalf of the organization, there is 
currently no way for the user to establish his or her authority while still retaining 
anonymity with the electronic mediums. This presents a problem for both the users 
and organizations, neither of which have heretofore been able to establish and 
manage relationships between pseudonymous identities in electronic mediums and 
memberships in those organizations. 
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SUMMARY OF THE INVENTION 

[0008] The present invention provides a system and method for establishing and 

managing relationships between pseudonymous identities in electronic mediums such 
as electronic communities and discussion forums and memberships in organizations. 
Both users and organizations can use the system and method of the present invention 
to provide assurance to other users of electronic mediums that communications from 
a particular user claiming membership in an organization can be trusted as 
communications from a bone fide member of the organization. Further, the present 
invention allows the organization to establish a pool of "official" spokespersons that 
may issue communications on behalf of the organization without the need to reveal 
the actual identities of the members in the pool. 
DESCRIPTION OF THE DRAWINGS 

[0009] Figure 1 is a functional diagram showing a registration process in an 

embodiment of the present invention. 

[0010] Figure 2 is a functional diagram showing the steps a user and an organization 

could take to establish a relationship between the user and the organization in an 
embodiment of the present invention. 

[001 1] Figure 3 is a functional diagram showing a deregistration process in an 

embodiment of the present invention. 

[0012] Figure 4 is a functional diagram showing the steps that may be performed in 

an embodiment of the present invention to allow an organization to disassociate a 
user from the organization. 
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[0013] Figure 5 is a functional diagram showing the steps that may be performed in 

an embodiment of the present invention to allow a user to renew membership in an 
organization. 

[0014] Figure 6 is a functional diagram showing the steps that may be performed in 

an embodiment of the present invention to allow a reader to authenticate a document 
and to verify the poster's membership in an organization. 

[0015] Figure 7 is a schematic diagram showing an architecture that may be used to 

implement an embodiment of the present invention. 
DETAILED DESCRIPTION OF THE INVENTION 

[° 01 6 ] An embodiment of the present invention allows a member of an organization 

to establish a pseudonymous identity that is bonded, i.e., related, to one or more 
organizations. Accordingly, an embodiment of the invention allows an organization 
member to interact with other individuals and/or service providers on electronic 
forums, such as the Internet, as an official member of the organization without 
revealing his/her true identity. 
Definitions 

[° 01 7 J Member - An individual who is a member of one or more organizations and 

wishes to use a pseudonymous identity that is linked with that organization to interact 
with other individuals or organizations via an electronic medium such as the Internet. 

[° 01 8 ] Organization - Any entity that wishes to allow its members to use 

pseudonymous identities to interact with other individuals or organizations in 
electronic mediums. An organization can be, for example, but is not limited to, a non- 
profit organization, a company, a government or government agency, an organized 
religious group, or any other such groups of people having common interests and a 
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centralized or semi-centralized body maintaining membership data. An organization 

that does not maintain such data could also benefit from the present invention, 

provided it has a means to decide who are valid members of the organization. 
[001 9] Authentication Authority - a body that distributes pseudonymous identities 

to members and maintains the relationship between members and organizations. 
[0020] Electronic Medium - any publicly accessible storage location where users 

can post documents that can be viewed by other individuals. Documents include both 

formal documents and informal messages that are may be posted to forums as part of 

ongoing discussions about a particular topic. 
[002 1 ] Reader - any individual that reads a document that is posted on a public 

forum by a Member or that receives a document directly from a Member. 
[0022] Membership Token - A key that can be distributed to an organization's 

members to server as proof that the individual is a member of the organization. The 

membership token is preferably a single-use digital key. 
[0023] Signature - An attachment to an electronic document that verifies that the 

document was created by a particular individual (or pseudonym). 
[0024] Discussion Application - Software that allows individuals to read and post 

documents (messages) to public discussion forums. 
System Operation 

[0025] Figure 1 is a first portion of a functional diagram showing how an 

embodiment of the present invention may be operated. Figure 1 shows the 
relationship between an organization 10 wishing to avail itself of the benefits of the 
present invention and an authentication authority 20. The organization registers with 
the authentication authority by providing relevant information about the organization. 
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Examples of such information may include the name of the organization, the location 
of the organization and contact information for the organization and information that 
can be used to authenticate the organization must be specified during the registration. 
For example, a login and password may be assigned for use by an administrator at the 
organization that will be utilized to authenticate the administrator prior to future 
transactions. Once registered, the organization's administrator would provide the 
assigned login and password before performing any privileged functions related to the 
organization. 

[0026] In exchange for registering with the authentication authority, an organization 

receives a plurality of membership tokens that can be used by the organization's 
members to establish a right to claim membership in the organization. In a preferred 
embodiment, each membership token is a "one-time only" token which, once used by 
an individual member of the organization can not be successfully used by another 
member. Membership tokens may operate in an analogous fashion to software license 
keys commonly used to prove authorization to use a particular software application or 
suite of applications. Each membership token is encoded with a checksum to prevent 
a member from typing the token incorrectly and to provide an additional level of 
security. A typical membership token may comprise a unique string or series of 
alphanumeric characters. A token may be encoded with some information that ties it 
to the organization. Alternatively, when tokens are generated, each token is stored in 
a central data store and associated with the organization. 

[0027] Further, membership tokens may include different levels of membership to 

distinguish classes of memberships. For example, organization 10 may have three 
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membership levels, A, B and C. Class A members may have more authority to speak 
for the organization- for example, they may comprise the organization's founding 
members. Alternatively, class A members may not have any special rights within an 
electronic community and yet may still wish to speak as a class A member of the 
organization. When organization 10 registers with authentication authority 20, it 
identifies the classes of memberships it wishes to offer to its members. The 
authentication authority then distributes different sets of membership tokens for each 
such class. Functionally, such varying classes of membership could be managed as 
separate organizations. That is, internal data structures maintained by authentication 
system 20 may treat each organization and subclass as a distinct organization. This 
implementation allows the authentication authority to easily adapt to different classes 
of membership if organizations so desire. Alternatively, the authentication authority 
may establish special data structures to manage the organization as a single entity 
have multiple classes of membership. 
[0028] Figure 2 shows the steps which may be performed to allow a member 30 of an 

organization 1 0 to establish a relationship between his or her pseudonymous identities 
and that membership status. As shown in Figures 1 and 2, organization 10 first 
registers with an authentication authority 20 (step 1 in Figure 1) and receive 
membership tokens for distribution to members (step 1 in Figure 2). Organization 10 
then distributes a membership token to member 30. The criteria used by organization 
10 to distribute membership tokens is completely at the discretion of the organization. 
For example, it may charge a premium to members receiving tokens or it may offer 
the tokens to every member requesting one. Moreover, as described in more detail 
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below, the organization may distribute membership tokens having an expiration date 
to better control a user's ability to claim membership in the organization. 
[0029] As shown in step 2 of Figure 2, organization 10 distributes the membership 

tokens to member 30. Organization 10 may print its tokens on paper and distribute 
them to members by hand. Alternatively, organization 1 0 may electronically 
distribute tokens to its member. Regardless of the means of distributing tokens, 
organization 1 0 may also include a URL that can be utilized by members to activate 
their membership. 

[0030] If member 30 has not already done so, he or she registers a pseudonym with 

authentication authority 20. Such registration may be accommodated via a web server 
or other computer system accessible by member 30. Authentication authority 30 may 
request certain information from member 30 to complete the registration process (step 
3). In a preferred embodiment, authentication authority 30 need not collect any 
personal identification information. For example, a registration process may include a 
request for the member to provide a valid email address and to choose a password for 
authentication when the member wishes to change his or her membership 
associations. In this manner, member 30 may protect his or her true identity from the 
authentication authority. When a pseudonym is registered, a public/private key pair 
may also be generated for the pseudonym. This key pair can be used by the member 
when posting documents to an electronic forum on which he or she wishes to include 
a digital signature associated with the pseudonym. 

[003 1 ] After member 30 has registered a pseudonym with authentication authority 

20, the member then associates the pseudonym with the member's organization by 
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providing the membership token distributed by the organization (step 4). As described 
above, in a preferred embodiment, the membership token is only valid for a single 
use. This prevents a member from sharing the token with others. Further, in another 
embodiment the membership token may have a limited life span to prevent misuse. In 
this embodiment, a token may be "activated" by either authentication authority 30 
upon issuance of the token to organization 10, or by organization 1 0 upon distribution 
of the token to a member. 

[0032] To further protect member 30's privacy, in a preferred embodiment, 

authentication authority 20 only uses the membership token to complete the 
association process. Once the member's pseudonym is associated with an 
organization, there is no longer any way to tie the member's actual identity back to 
the pseudonym. Accordingly, even if an organization maintains records in an effort to 
tie members' pseudonymous communications to the actual member, the pseudonyms' 
real identities can be protected. The association between the pseudonym and the 
organization is recorded in a central data store. 

[0033] The steps shown in Figure 2 may be repeated as often as member 30 likes. 

That is, member 30 can associate many memberships with a single pseudonym, 
provided he or she obtains valid membership tokens from each organization to be 
associated with the pseudonym. Also, member 30 may register more than one 
pseudonym and associate memberships with each pseudonym. If the membership 
token is a use-once token, then the member would have to obtain additional tokens 
from those organizations being associated with multiple pseudonyms. 
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[0034] In an embodiment of the present invention, member 30 may remove the 

association between his or her pseudonym and the organization as shown in Figure 3. 
In a preferred embodiment, member 30 is authenticated to insure that the request to 
remove an association is made by the rightful owner of the pseudonym prior to this 
operation. As shown in Figure 3, organization 10 need not be involved in the 
transaction to effect disassociation of member 30's pseudonym to the organization. 
Accordingly, removal of the tie between the pseudonym and the organization does 
not affect the member's actual membership status in the organization. 

[0035] In an embodiment of the present invention, an organization may revoke 

permission for a particular pseudonym to be identified with the organization. As 
shown in Figure 4, organization 10 may send a message to authentication authority 20 
requesting the authority to disassociate a particular pseudonym from the organization. 
As described above, organization 10 has no way of knowing the actual identity of the 
member to be "banished" from the organization. Accordingly, such revocation does 
not affect the member's actual status as a member of the organization. In a preferred 
embodiment of the present invention, authentication authority 20 sends a notice to 
member 30 after completing the disassociation process. 

[0036] In an embodiment of the present invention, a system and method are provided 

for renewing an association between a pseudonym and an organization. In another 
embodiment of the present invention, organization 10 may specify that memberships 
never expire. A renewal process may be used in embodiments wherein the 
membership is only valid for a limited period. In such embodiments, organization 10 
may specify the duration of the membership. For example, many organizations 
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require payment of annual dues to maintain membership in the organization. In this 
instance, at the time the organization registers with the authentication authority, it 
may specify that the association between each member's pseudonym and the 
organization will expire (become inactivate) on a certain date or after a certain period. 
Accordingly, authentication authority 20 issues tokens having an expiration period. 
When a member uses such a token, authentication authority 20 registers the 
association together with the expiration date or duration. 

[0037] When the expiration date approaches, authentication authority 20 marks the 

association between a member's pseudonym and the organization as expired in step 1 
shown in Figure 5, Authentication authority 20 sends a notification of the expiration 
to the pseudonym's email address in step 2 of Figure 5. In one embodiment, 
authentication authority 20 sends a notification message prior to the expiration date to 
allow member 30 sufficient time to renew his or her membership before the 
association is removed from the system. 

[0038] Member 30 contacts organization 10 to request a new membership token (step 

3 in Figure 5). In step 4, organization 10 distributes a new membership token to 
member 30. In step 5, the member renews the association of his or her pseudonym 
with the organization by contacting authentication authority 20 as described earlier. 
Publish Document 

[0039] Figure 6 shows the steps involved in an embodiment of the present invention 

when a user retrieves a document published by a pseudonym having a membership 
recorded with an authentication authority. As used herein, publication means posting 
a message or document on a public forum where another individual can read it. As 
shown in Figure 6, member 30 may compose and sign a document to be posted on an 
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electronic forum (steps 1 and 2 in Figure 6). Prior to posting the document, the 
member electronically signs the document with his/her pseudonym so that readers of 
the document can authenticate the document as being published by the pseudonym. A 
discussion application (described in more detail in the System Implementation 
section, below) can be used by member 30 to compose a document and then to post 
the document to a public discussion forum. In an embodiment of the present 
invention, the discussion application is adapted to issue a request to authentication 
authority 20 to have the document digitally signed before it is posted to the forum. 
[0040] If requested, authentication authority 20 computes a digital signature from the 

content of the message, the pseudonym of the member posting the document, and the 
date the document was posted. Authentication authority 20 then returns the digital 
signature to the discussion application where the document may be combined with the 
signature and posted to a discussion server. In step 3, member 30 posts the document 
to electronic forum 40 with the signature attached. Once the signed document is 
posted to electronic forum 40, it is available to other users of the forum, including 
e.g., reader 50 

[0041] Reader 50 may use a discussion application to read the document. Information 

about the poster of the document can be displayed including the pseudonym that 
posted the message and the organizations in which the claims membership. The 
reader may also use the discussion application to verify the digital signature of the 
message. To accomplish this, the discussion application sends a validation request to 
the authentication authority with the digital signature for verification. The response to 
the request indicates whether or not the document was actually posted by the 
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pseudonym. When reader 50 retrieves the document from electronic forum 40 (step 
4), he or she may submit the signed document to authentication authority 20 where 
the signature can be authenticated (step 5). Further, reader 50 may verify that the 
author of the document (i.e., the posting pseudonym) is a member of organization 1 0 
by issuing an appropriate request to authentication authority 20, as shown in step 6 in 
Figure 6. Organization 10 need not be involved in either the authentication or 
verification steps as shown in Figure 6. 
System Implementation 

An embodiment of the present invention may be implemented using an 
architecture such as shown in Figure 7. In this exemplary embodiment, network 2 is 
utilized to provide connectivity between organization 10, member 30, reader 50 and 
authentication authority 20. Network 2 may be any suitable network providing such 
connectivity, such as, e.g., the Internet. Organization 10 communicates with 
authentication authority 20 using any suitable communications application and or 
protocols supported by network 2. For example, organization 10 may use web 
browser 1 1 and the well-known HTTP protocol to interface web server 21 operated 
by authentication authority 20. Web browser 1 1 and web server 21 may be any 
standard Web browser and server applications. Web server 21 may include support 
for both HTTP and XML pages which guide organization 10 through the initial 
registration process and any subsequent administration performed by organization 10. 
For example, organization 10 may use web browser 1 1 to access web server 21 to 
request disassociation of a particular pseudonym or to request additional membership 
tokens. 
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[0043] Web server 21 has access to central data store 22 which may also be 

maintained by authentication authority 20. Central data store 22 may comprise one or 
more databases such as pseudonym database 23, organization database 24, 
membership token database 25, encryption key database 26 and signature information 
database 27. Each of databases 23-27 may comprise a single database or may be 
separate databases as shown in Figure 7. Central data store 22 may be a relational 
database, such as, e.g., an Oracle database. Alternatively, central data store 22 may 
comprise one or more data files for storing information used to implement the present 
invention. 

[0044] Pseudonym database 23 can be used to store information about each 

pseudonym registered according to the present invention. Information stored in 
database 23 may include, e.g., the pseudonym, an email address for the pseudonym, 
an identifier for each association associated with the pseudonym, any other 
information that may be collected from the pseudonym for use with the present 
invention or for other purposes. 

[0045] Organization database 24 comprises data collected from the organization upon 

registration with the authentication authority. Other information may be included in 
database 24, such as a list of all pseudonyms currently associated with the 
organization, a policy record comprising the organizations expiration and renewal 
procedures, and other information concerning the services provided to the 
organization by authentication authority 20. 

[0046] Membership tokens database 25 may comprise a list of membership tokens 12 

to be distributed and may include a cross-reference to tokens that have already been 
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distributed identifying the organization and, if applicable, the expiration period for 
the tokens. 

[0047] Encryption database 26 and signature information database 27 are described in 

greater detail in later sections below. 

[0048] Member 30 (also referred to herein as "user 30") communicates with 

authentication authority 20 using any suitable communications application and/or 
protocols supported by network 2. Member 30 may also communicate with 
organization 10 to receive membership token 12 as shown in Figure 7. This 
communication may be an electronic communication, a verbal communication , a 
written communication or other means to pass the token from organization 10 to 
member 30. 

[0049] In an embodiment such as shown in Figure 7 5 user 30 may use a standard web 

browser 31 to perform all administrative functions with authentication authority 20. 
In addition to web browser 31, member 30 member uses discussion application 32 to 
publish documents (messages) to a public forum. Discussion application 32 may be 
for example, a web browser application, an email application, a newsgroup 
application, or other such specialized or non-specialized applications allowing 
member 30 to publish documents on an electronic discussion forum. In the 
embodiment shown in Figure 7, discussion application 32 is newsgroup application 
using the well-known NNTP or XML protocols supported by network 2. Moreover, 
for illustrative purposes, Figure 7 shows electronic forum 40 comprising Internet 
News Server (INN) 41 and discussion database 42. Again, the electronic discussion 
forum is not limited to newsgroup-type forums but may comprise may other 
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electronic discussion forums including but not limited to newsgroups, bulletin boards, 
conferencing systems, and the like. 

[0050] In an embodiment of the present invention, discussion application 32 is also 

adapted to interface with a public key infrastructure (PKI) system to enable member 
30 to digitally sign documents that are being published. Alternatively, member 30 
may manually intervene to place digital signatures on the documents. The PKI system 
may operate in conjunction with the pseudonym-organization association system of 
the present invention, as shown in Figure 7. In this case, discussion application 32 is 
adapted to interface with authentication authority 20. 

[005 1 ] Reader 50 may use discussion application 52 to read documents published in 

electronic forum 40. In addition to standard discussion functionality (read/post/etc.), 
discussion application 52 may include functionality to verify digital signatures for 
messages that have been posted by members. In this case, discussion application 52 is 
adapted to interface with a PKI system or with authentication authority 20 as shown 
in Figure 7. 

[0052] In addition to the elements described above, authentication authority 20 may 

also comprise directory server 28 as shown in Figure 7. Directory server 28 may be 
accessed by organization 10, member 30 or reader 50 via web browser 1 1, 31 or 51, 
respectively. Further, member 30 and reader 50 may use discussion application 32 or 
52, respectively, to interface with directory server 28. Directory server 28 can be used 
to provide enhanced user directory services, including for example, locating a 
pseudonym or organization and/or providing additional information about a 
pseudonym or an organization. Directory server 28 may use the well-known 
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Lightweight Directory Application Protocol (LDAP) or other protocol such as used in 

the well-known "whois" services. 

Exemplary Applications of the Present Invention 

[0053] The present invention may be advantageously used in a variety of 

applications. For example, a corporation may implement a system for associating 
pseudonyms with particular marketing feedback/focus groups. In this instance the 
corporation may serve as the authentication authority, or it may use an authentication 
authority provided by some third party. The focus group could be registered as an 
"organization" according to the present invention and individual members of the 
focus group would receive membership tokens associated with the focus group. The 
members of the focus group may then establish a pseudonymous association with the 
focus group as described herein. By doing so 5 the members of the group can freely 
provide feedback to the corporation without being individually identified. Moreover, 
the corporation can be assured that any such feedback received originated with a bona 
fide member of its focus group. Such an ability to obtain pseudonymous feedback 
online may result in more accurate feedback because group members may feel more 
free to express complete opinions knowing that they will not be singled out for 
undesired marketing calls or for other undesired attention from the corporation. 

[0054] In addition to such marketing focus groups which may be primarily directed at 

consumers or customers, the present invention may also be used to create a 
pseudonymous suggestion box. In this case, a corporation could issue membership 
tokens to employees who could then associate an pseudonym with the corporation 
and provide anonymous comments to an electronic suggestion box. The corporation 
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could also distribute membership tokens to employees according to their business unit 
or work areas so as to receive more meaningful feedback from groups of employees. 
[0055] In another example, the present invention is well-suited for electronic voting 

applications. For example, a student government organization may issue voter (i.e., 
membership) tokens to students eligible to vote in student elections. The students 
could then associate a pseudonym with the student organization and vote 
electronically. Other elections where membership in a particular party or organization 
is required for voting could also use an embodiment of the present invention. For 
example, in some primary elections, only registered member the political party 
involved may eligible to cast a vote for party representatives. In such a case, the 
present invention could be used to facilitate an electronic voting system that preserves 
the anonymity of the voter while assuring the voter's membership in the class of 
eligible voters. 

[0056] An electronic voting system, such as described above, could be monitored or 

recorded by an election authority or some other trustworthy agency. In one 
embodiment, when voter receives a voter token from his election authority, the token 
may only be valid to associate a pseudonym with a particular a particular voting 
precinct or other group of eligible voters. In another embodiment, the voter token 
may only be valid to associate a voter's pseudonym to a particular election activity. 

[0057] In another example, the present invention may be used by online dating 

services or electronic discussion environments that allow participants the opportunity 
to become more acquainted with one another prior to revealing their actual identities. 
In many such environments, participants desire heretofore conflicting needs: (1) a 
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need for anonymity, and (2) need for some assurance that the person they are 
interested in belongs to whatever category claimed (male, female, certain age-group, 
etc.). The present invention is ideally suited for meeting both needs. The participants 
could provide verification to some trusted third party (such as, e.g., the dating service 
provider, or some other entity in a position to issue membership tokens to individuals 
based on the verified class). The trusted third party would of course register the class 
as an "organization" with an authentication authority. The participants would then 
associate a pseudonym with the authentication authority enabling others to verify the 
association between the class and the pseudonym. 
[0058] In describing representative embodiments of the present invention, the 

specification may have presented the method and/or process of the present invention 
as a particular sequence of steps. However, to the extent that the method or process 
does not rely on the particular order of steps set forth herein, the method or process 
should not be limited to the particular sequence of steps described. As one of ordinary 
skill in the art would appreciate, other sequences of steps may be possible. Therefore, 
the particular order of the steps set forth in the specification should not be construed 
as limitations on the claims. In addition, the claims directed to the method and/or 
process of the present invention should not be limited to the performance of their 
steps in the order written, and one skilled in the art can readily appreciate that the 
sequences may be varied and still remain within the spirit and scope of the present 
invention. 

[° 059 ] The foregoing disclosure of embodiments and exemplar/ applications of the 

present invention has been presented for purposes of illustration and description. It is 
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not intended to be exhaustive or to limit the invention to the precise forms disclosed. 
Many variations and modifications of the embodiments described herein will be 
obvious to one of ordinary skill in the art in light of the above disclosure. The scope 
of the invention is to be defined only by the claims appended hereto, and by their 
equivalents. 
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WHAT IS CLAIMED IS: 

1. A method for providing assurance that an electronic pseudonym belongs to a member of 
a particular organization, said method comprising the steps of: 

registering the organization with an authentication authority; 

distributing a membership token from the authentication authority to the organization; 

distributing the membership token to the member; 

registering the pseudonym with the authentication authority; and 

associating the pseudonym with the organization using the membership token. 

2. The method of claim 1, wherein the membership token comprises a unique string of 
alphabetical and numerical characters. 

3. The method of claim 1 9 wherein the membership token comprises an encoded identifier 
of the organization. 

4. The method of claim 1, wherein the step of associating the membership with the 
organization comprises the steps of receiving a log-in by a user on a computer system at the 
authentication authority; verifying a permission of the user to manage the pseudonym; and 
receiving the membership token from the user. 

5. The method of claim 4, further comprising the steps of retrieving an identification of the 
organization from a database comprising membership tokens and corresponding organizations. 

6. The method of claim 4, further comprising the step of decoding the membership token to 
determine the identity of the organization to be associated with the pseudonym. 

7. The method of claim 1, wherein the membership token comprises an expiration date. 

8. The method of claim 7, further comprising the step of verifying that the membership 
token has not expired before performing the step of associating the pseudonym with the 
organization. 
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9. The method of claim 1, wherein the association of the pseudonym with the organization 
has an expiration period. 

1 0. The method of claim 9, further comprising the steps of notifying the member when the 
expiration period has passed. 

1 1 . The method of claim 1 , wherein the association of the pseudonym with the organization 
has an expiration date. 

12. The method of claim 1 1 , further comprising the steps of notifying the member when the 
expiration date has passed. 

1 3 . The method of claim 1 1 , further comprising the steps of notifying the member prior to the 
expiration date being reached. 

14. The method of claim 1, further comprising the steps of receiving at the authentication 
authority a revocation notice from the organization and removing the association of the 
pseudonym with the organization according to the revocation notice. 

15. A method for providing assurance that a document posted to an electronic forum by a 
user belonging to a particular organization, wherein the user posts the electronic document using 
a pseudonymous identity, said method comprising the steps of: 

registering the organization with an authentication authority; 

distributing a membership token from the authentication authority to the organization, in 
response to the step of registering the organization; 

receiving at the authentication authority a communication comprising the membership 
token and the pseudonymous identity, said communication being sent by the user; 

associating, at the authentication authority, the pseudonymous identity with the 
organization; 
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providing the user with a means for electronically signing the document using the 
pseudonymous identity; 

verifying that the document was electronically signed using the pseudonymous identity; 

and 

providing verification to a reader of the document that the pseudonymous identity is 
associated with the organization. 

1 6. The method of claim 15, wherein the membership token comprises a unique string of 
alphabetical and numerical characters. 

1 7. The method of claim 1 5, wherein the membership token comprises an encoded identifier 
of the organization. 

1 8. The method of claim 1 5, wherein the step of associating the pseudonymous identity with 
the organization comprises the steps of receiving a log-in by the user on a computer system at the 
authentication authority; verifying a permission of the user to manage the pseudonymous 
identity; and receiving the membership token from the user. 

1 9. The method of claim 1 8, further comprising the steps of retrieving an identification of the 
organization from a database comprising membership tokens and corresponding organizations. 

20. The method of claim 1 8, further comprising the step of decoding the membership token 
to determine the identity of the organization to be associated with the pseudonymous identity. 

21 . The method of claim 15, wherein the membership token comprises an expiration date. 

22. The method of claim 2 1 , further comprising the step of verifying that the membership 
token has not expired before performing the step of associating the pseudonymous identity with 
the organization. 
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23. The method of claim 15, wherein the association of the pseudonymous identity with the 
organization has a pre-determined life-span. 

24. The method of claim 23, further comprising the steps of notifying the pseudonymous 
identity when the pre-determined life-span has been exceeded. 

25. The method of claim 15, wherein the association of the pseudonymous identity with the 
organization has an expiration date. 

26. The method of claim 25, further comprising the steps of notifying the pseudonymous 
identity when the expiration date has passed. 

27. The method of claim 25, further comprising the steps of notifying the pseudonymous 
identity prior to the expiration date being reached. 

28. The method of claim 1 5, further comprising the steps of receiving at the authentication 
authority a revocation notice from the organization and removing the association of the 
pseudonymous identity with the organization according to the revocation notice. 

29. A method for electronically receiving anonymous feedback from a plurality of members 
of a customer feedback group, comprising the steps of: 

distributing a membership token associated with the customer feedback group to each of 
the plurality of members; 

receiving at an authentication authority a communication from each of the plurality of 
members, said communication comprising the member's membership token and a 
pseudonymous identity for the member; 

associating at the authentication authority, each of the plurality of members 
pseudonymous identities with the customer feedback group; 

receiving at least one electronic feedback message having an anonymous author, and 
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verifying that the anonymous author corresponds to one of the pseudonymous identities 
associated with the customer feedback group. 

30. The method of claim 29, wherein the membership token comprises a unique string of 
alphabetical and numerical characters. 

31. The method of claim 29, wherein the membership token comprises an encoded identifier 
of the customer feedback group. 

32. A method of authenticating anonymous electronic votes cast by voters eligible to vote in 
an election, comprising the steps of: 

distributing a voter token from an authentication authority to an election authority; 

receiving at the authentication authority a communication comprising the voter token and 
an pseudonymous identity, said communication being sent from a voter eligible to vote in the 
election; 

associating at the authentication authority the pseudonymous identity with the election; 

providing the voter with a means for electronically signing an electronic vote using the 
pseudonymous identity; 

verifying that the electronic vote was electronically signed using the pseudonymous 
identity; and 

providing verification to the election authority that the pseudonymous identity is 
associated with a voter eligible to vote in the election. 

33. The method of claim 32, wherein the voter token comprises a unique string of 
alphabetical and numerical characters. 

34. The method of claim 32. wherein the voter token comprises an encoded identifier of the 
organization. 
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35. The method of claim 32, wherein the step of associating the pseudonymous identity with 
the election comprises the steps of receiving a log-in by the voter on a computer system at the 
authentication authority; verifying a permission of the voter to manage the pseudonymous 
identity; and receiving the voter token from the voter. 

36. The method of claim 35, further comprising the steps of retrieving an identification of the 
election from a database comprising voter tokens and corresponding elections. 

37. The method of claim 32, further comprising the step registering the election with the 
authentication authority, and wherein in the step of distributing the voter token to the election 
authority is performed in response to the registering step. 

38. The method of claim 32, wherein the voter token comprises an expiration date. 

39. The method of claim 38, further comprising the step of verifying that the voter token has 
not expired before performing the step of associating the pseudonymous identity with the 
election. 

40. The method of claim 32, wherein the association of the pseudonymous identity with the 
election has a pre-determined life-span. 

41 . The method of claim 40, wherein the pre-determined life-span corresponds to an election 
period. 

42. The method of claim 32, wherein the association of the pseudonymous identity with the 
election is valid for a pre-determined date range. 

43. The method of claim 42, wherein the pre-determined date range is an election date. 

44. The method of claim 32, further comprising the steps of receiving at the authentication 
authority a revocation notice from the election and removing the association of the 
pseudonymous identity with the election according to the revocation notice. 
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45. A method for facilitating an electronic dating service providing anonymous 
communications between customers with verification that a particular customer is a member of a 
claimed class of customer, said method comprising the steps of: 

distributing a membership token associated with a class of customers from the electronic 
dating service to a member of the class; 

receiving at the electronic dating service a communication comprising the membership 
token and a pseudonymous identity, said communication being sent from the member of the 
class; 

associating at the electronic dating service the pseudonymous identity with the class; 
verifying that an anonymous communication was sent by a member of the class, wherein 
the anonymous communication was sent using the pseudonym. 

46. The method of claim 45, wherein the membership token comprises a unique string of 
alphabetical and numerical characters. 

47. The method of claim 45, wherein the membership token comprises an encoded identifier 
of the class. 

48. The method of claim 45, wherein the step of associating the pseudonymous identity with 
the class comprises the steps of receiving a log-in by a user on a computer system at the 
electronic dating service; verifying a permission of the user to manage the pseudonymous 
identity; and receiving the membership token from the user. 

49. The method of claim 48, further comprising the steps of retrieving an identification of the 
class from a database comprising membership tokens and corresponding classes. 

50. The method of claim 49. farther comprising the step of decoding the membership token 
to determine the identity of the class to be associated with the pseudonymous identity. 
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5 1 . The method of claim 45, further comprising the step removing the association of the 
pseudonymous identity with the class. 

52. The method of 45, further comprising the steps of 

providing the customer with a means for electronically signing the anonymous 
communication using the pseudonymous identity; 

verifying that the anonymous communication was electronically signed using the 
pseudonymous identity; and 

providing verification to a reader of the anonymous communication that the 
pseudonymous identity is associated with the class. 

53. An authentication authority for providing assurance that an electronic pseudonym 
belongs to a member of a particular organization, said authentication authority comprising: 

a database of registered organizations; 

a database of membership tokens assigned to each registered organization; and 

a database of associations between electronic pseudonyms and registered organizations, 

wherein the database of associations between electronic pseudonyms and organizations is 

populated when the authentication authority receives a communication comprising a membership 

token and an electronic pseudonym. 

54. The authentication authority of claim 53, wherein the particular organization comprises a 
plurality of voters registered by an election authority. 

55. The authentication authority of claim 53, wherein the authentication authority further 
comprises an electronic dating service and wherein the particular organization comprises a 
plurality of people sharing a common trait. 



29 



WO 03/005639 



PCT/US02/20132 



56. The authentication authority of claim 53, farther comprising programming logic for 
distributing a membership token to an organization when the organization registers with the 
authentication authority. 

57. A system for providing assurance that a document posted to an electronic forum by a user 
belonging to a particular organization, wherein the user posts the electronic document using a 
pseudonym, said system comprising: 

a computer system comprising a memory and a processor; 

a database comprising registered organizations, registered pseudonyms, and membership 

tokens; 

a means for distributing a membership token from the computer system to an 
organization; 

a means for the computer system to receive a communication comprising the membership 
token and the pseudonym, said communication being sent from the user; 

a means for associating the pseudonym with the organization in the database; 

a means for electronically signing the document with the pseudonym; 

a means for verifying that the document was electronically signed with the pseudonym; 

and 

a means for providing verification to a reader of the document that the pseudonym is 
associated with the organization. 
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